Lucas and Luna reveal how misconfigured source maps in production builds leak internal code paths, API endpoints, and even credentials to anyone who opens browser dev tools. They walk through a real incident where a major e-commerce site exposed its entire internal admin panel structure via a .map file served from their CDN. The episode covers how to audit your own source map exposure, the difference between hidden-source-map and nosources-source-map, and why Webpack's default settings are dangerously permissive. You'll learn a single-line config change that stops the leak cold, plus how to verify the fix with curl. No scaremongering — just concrete steps to lock down what should never leave your build server.

#Webpack #SourceMaps #WebSecurity #Frontend #JavaScript #DevTools #ProductionSecurity #WebpackConfig #HiddenSourceMap #NosourcesSourceMap #CDNLeak #CodeExposure #SecurityAudit #Technology #FexingoBusiness #BusinessPodcast #WebDevPodcast #FexingoTech

Keep every episode free: buymeacoffee.com/fexingo